This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.registro.br/repo/7WPKMt1r3YnQ5R4QFpUrQj4uhC9V3ua2TRRAehXbAMbk/0/DE6F592A3E21D9409FE566090C70760D8A8829F9.mft File: DE6F592A3E21D9409FE566090C70760D8A8829F9.mft (raw, json) Hash identifier: PxtJP01cyNqQtW5X7bx4rSDauJ09/O6hJyu99iN357U= Subject key identifier: DD:D4:D9:07:F9:0A:EF:88:26:51:AF:65:D8:0B:08:76:0C:42:60:71 Authority key identifier: DE:6F:59:2A:3E:21:D9:40:9F:E5:66:09:0C:70:76:0D:8A:88:29:F9 Certificate issuer: /CN=DE6F592A3E21D9409FE566090C70760D8A8829F9 Certificate serial: 25BDE703E5DE2F393416D2AE9A77A304B8354883 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE6F592A3E21D9409FE566090C70760D8A8829F9.cer Subject info access: rsync://rpki-repo.registro.br/repo/7WPKMt1r3YnQ5R4QFpUrQj4uhC9V3ua2TRRAehXbAMbk/0/DE6F592A3E21D9409FE566090C70760D8A8829F9.mft Manifest number: 0149 Signing time: Mon 22 Dec 2025 15:46:13 +0000 Manifest this update: Mon 22 Dec 2025 15:41:13 +0000 Manifest next update: Tue 23 Dec 2025 16:14:13 +0000 Files and hashes: 1: 34352e3139302e34342e302f32322d3332203d3e20323639363139.roa (hash: YIV68odJnnvyENFBVToK3j4DymGH2NDRnOlNrXSFo5U=) 2: 323830343a363734633a3a2f33322d313238203d3e20323639363139.roa (hash: 3dSflarnefSWoi15qF2smGQKCRzR5sIo1eLnj2YlYTY=) 3: DE6F592A3E21D9409FE566090C70760D8A8829F9.crl (hash: GQo9/hmDllPh8iYZQwVxpyVXWkQM+bgdIbubSb20eaE=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/7WPKMt1r3YnQ5R4QFpUrQj4uhC9V3ua2TRRAehXbAMbk/0/DE6F592A3E21D9409FE566090C70760D8A8829F9.crl rsync://rpki-repo.registro.br/repo/7WPKMt1r3YnQ5R4QFpUrQj4uhC9V3ua2TRRAehXbAMbk/0/DE6F592A3E21D9409FE566090C70760D8A8829F9.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE6F592A3E21D9409FE566090C70760D8A8829F9.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 23 Dec 2025 16:14:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:bd:e7:03:e5:de:2f:39:34:16:d2:ae:9a:77:a3:04:b8:35:48:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DE6F592A3E21D9409FE566090C70760D8A8829F9 Validity Not Before: Dec 22 15:41:13 2025 GMT Not After : Dec 23 16:14:13 2025 GMT Subject: CN=DDD4D907F90AEF882651AF65D80B08760C426071 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:39:fe:c2:78:0a:d7:2a:aa:15:db:d3:10:8b: 09:65:3b:c5:2c:64:cb:ed:fc:da:b4:f9:f7:17:ef: 5f:56:c7:cb:36:6e:75:36:60:bb:49:ab:79:59:f6: c7:65:13:a0:03:a2:99:e8:6d:e0:52:22:b3:d8:b3: 2c:b0:13:7a:d2:ff:65:13:76:bf:61:a1:8d:ae:a8: 6f:3c:3a:95:ea:71:f1:3e:ff:15:ac:9c:51:65:eb: eb:6f:a1:5f:94:44:d4:92:8a:11:07:f2:0b:6e:c8: f6:17:99:c5:ee:c0:37:b3:ff:b3:2b:71:00:87:24: f0:11:87:20:08:61:6b:ba:28:9c:f2:8e:7c:0f:22: 67:d2:59:a6:15:41:15:3b:dc:75:01:58:12:4b:71: 1f:d3:4e:b6:e0:5c:bf:e1:8a:81:1a:25:3c:7c:62: 99:62:32:b0:be:e7:52:85:03:99:cf:d7:35:dd:7c: 66:14:0e:4d:2d:51:6e:70:cb:a8:c6:b4:cc:a3:f8: e1:34:33:41:91:d9:47:04:77:d1:72:ec:2f:af:ca: 77:ac:08:b2:ed:09:e9:dc:2e:d3:45:27:02:b3:1d: 02:d1:9b:ac:a7:a5:cd:fe:70:97:87:1b:6e:ab:0b: 52:d2:40:d5:e4:61:f0:41:39:58:89:dc:f7:76:8d: 0a:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:D4:D9:07:F9:0A:EF:88:26:51:AF:65:D8:0B:08:76:0C:42:60:71 X509v3 Authority Key Identifier: keyid:DE:6F:59:2A:3E:21:D9:40:9F:E5:66:09:0C:70:76:0D:8A:88:29:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/7WPKMt1r3YnQ5R4QFpUrQj4uhC9V3ua2TRRAehXbAMbk/0/DE6F592A3E21D9409FE566090C70760D8A8829F9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE6F592A3E21D9409FE566090C70760D8A8829F9.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/7WPKMt1r3YnQ5R4QFpUrQj4uhC9V3ua2TRRAehXbAMbk/0/DE6F592A3E21D9409FE566090C70760D8A8829F9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:6f:b5:2f:37:7b:e5:f4:00:83:6b:6a:0e:b1:c2:f6:d3:16: d5:41:15:29:83:20:3d:30:56:1f:be:83:f2:42:91:af:09:96: 03:18:d7:73:85:36:b6:6c:b7:a9:6b:2f:c6:df:81:e4:7a:d1: ad:32:61:e7:f4:f1:98:2e:c0:09:ee:5a:db:b1:b3:39:59:1e: 04:6a:a2:6b:0d:38:43:5f:9e:31:bd:96:d5:c9:38:84:f4:0a: ce:05:3f:51:5a:7f:9a:f4:67:34:b7:f0:06:dd:5d:d5:d4:63: 7e:60:0a:7b:fd:e9:c1:fe:29:d3:74:8d:95:4d:69:20:1f:5c: a9:7e:60:33:47:d6:9c:79:17:56:c3:47:fe:75:1a:3b:11:01: 76:db:d8:d7:5f:2a:7a:63:77:49:3f:48:44:2b:be:97:bd:58: d2:ad:52:0a:18:d7:a8:61:81:39:66:40:bd:0e:83:77:b8:1f: c6:aa:96:32:34:ac:50:20:31:f3:98:ac:4d:c2:44:5c:f7:6c: 9d:bd:08:f9:8b:4e:35:c8:fa:d8:eb:3d:c4:81:81:34:3a:27: 10:9f:0b:ee:39:52:f6:09:92:cc:97:71:1b:9c:ce:24:74:1a: 33:59:a1:07:3a:e4:f3:12:cb:24:fa:a3:f8:6d:53:88:3b:fd: 4a:cc:f3:a4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUJb3nA+XeLzk0FtKumnejBLg1SIMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREU2RjU5MkEzRTIxRDk0MDlGRTU2NjA5MEM3MDc2MEQ4 QTg4MjlGOTAeFw0yNTEyMjIxNTQxMTNaFw0yNTEyMjMxNjE0MTNaMDMxMTAvBgNV BAMTKERERDREOTA3RjkwQUVGODgyNjUxQUY2NUQ4MEIwODc2MEM0MjYwNzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPOf7CeArXKqoV29MQiwllO8Us ZMvt/Nq0+fcX719Wx8s2bnU2YLtJq3lZ9sdlE6ADopnobeBSIrPYsyywE3rS/2UT dr9hoY2uqG88OpXqcfE+/xWsnFFl6+tvoV+URNSSihEH8gtuyPYXmcXuwDez/7Mr cQCHJPARhyAIYWu6KJzyjnwPImfSWaYVQRU73HUBWBJLcR/TTrbgXL/hioEaJTx8 YpliMrC+51KFA5nP1zXdfGYUDk0tUW5wy6jGtMyj+OE0M0GR2UcEd9Fy7C+vynes CLLtCencLtNFJwKzHQLRm6ynpc3+cJeHG26rC1LSQNXkYfBBOViJ3Pd2jQqFAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU3dTZB/kK74gmUa9l2AsIdgxCYHEwHwYDVR0j BBgwFoAU3m9ZKj4h2UCf5WYJDHB2DYqIKfkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vN1dQS010MXIzWW5RNVI0UUZwVXJRajR1aEM5VjN1YTJUUlJBZWhYYkFN YmsvMC9ERTZGNTkyQTNFMjFEOTQwOUZFNTY2MDkwQzcwNzYwRDhBODgyOUY5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RFNkY1OTJBM0UyMUQ5NDA5 RkU1NjYwOTBDNzA3NjBEOEE4ODI5RjkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v N1dQS010MXIzWW5RNVI0UUZwVXJRajR1aEM5VjN1YTJUUlJBZWhYYkFNYmsvMC9E RTZGNTkyQTNFMjFEOTQwOUZFNTY2MDkwQzcwNzYwRDhBODgyOUY5Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEASm+1Lzd75fQAg2tqDrHC9tMW1UEVKYMgPTBWH76D8kKRrwmWAxjXc4U2tmy3 qWsvxt+B5HrRrTJh5/TxmC7ACe5a27GzOVkeBGqiaw04Q1+eMb2W1ck4hPQKzgU/ UVp/mvRnNLfwBt1d1dRjfmAKe/3pwf4p03SNlU1pIB9cqX5gM0fWnHkXVsNH/nUa OxEBdtvY118qemN3ST9IRCu+l71Y0q1SChjXqGGBOWZAvQ6Dd7gfxqqWMjSsUCAx 85isTcJEXPdsnb0I+YtONcj62Os9xIGBNDonEJ8L7jlS9gmSzJdxG5zOJHQaM1mh Bzrk8xLLJPqj+G1TiDv9SszzpA== -----END CERTIFICATE-----Generated at Tue Dec 23 02:42:03 2025 by rpki-client